@agentprojectcontext/apx 1.77.3 → 1.79.0

package/src/interfaces/cli/commands/memory.js

@@ -2,6 +2,10 @@ import fs from "node:fs";
 import { findApfRoot } from "#core/apc/parser.js";
 import { agentMemoryPath, readAgentMemory, writeAgentMemory, ensureAgentRuntimeDir } from "#core/agent/memory.js";
 import { http } from "../http.js";
+import {
+  proposeConsolidation, applyConsolidation, revertConsolidation, notebookSize,
+} from "#core/memory/consolidate.js";
+import { readSelfMemory } from "#core/agent/self-memory.js";
 
 function requireRoot() {
   const root = findApfRoot();
@@ -12,9 +16,9 @@ function requireRoot() {
 async function nudgeDaemon(root) {
   try {
     if (!(await http.ping())) return;
-    const projects = await http.get("/projects", { autoStart: false });
+    const projects = await http.get("/api/projects", { autoStart: false });
     const me = projects.find((p) => p.path === root);
-    if (me) await http.post(`/projects/${me.id}/rebuild`, undefined, { autoStart: false });
+    if (me) await http.post(`/api/projects/${me.id}/rebuild`, undefined, { autoStart: false });
   } catch {}
 }
 
@@ -66,3 +70,72 @@ function readStdinSync() {
   } catch {}
   return chunks.join("");
 }
+
+
+// ── The super-agent's own notebook (~/.apx/memory.md) ────────────────────────
+//
+// Distinct from `apx memory <agent-slug>` above, which is a PROJECT agent's
+// memory. This one ships in every super-agent prompt on every channel, which
+// is why its size is worth showing and its growth worth controlling.
+
+export async function cmdMemoryNotebook() {
+  const s = notebookSize();
+  console.log(`\nnotebook: ${s.entries} entries · ${s.chars} chars · ~${s.approx_tokens} tokens`);
+  // The number that matters: this is paid on every turn, of every channel.
+  console.log(`  ${s.consolidated} of them written by consolidation.`);
+  console.log("  This file is injected into every super-agent prompt.\n");
+  const body = readSelfMemory();
+  if (body.trim()) process.stdout.write(body.endsWith("\n") ? body : body + "\n");
+}
+
+/**
+ * apx memory consolidate [--apply] [--limit N]
+ *
+ * Candidates arrive on STDIN, one per line. The DISTILLING is the caller's job
+ * — a routine with a model behind it, or a person — and the JUDGEMENT about
+ * what survives lives in core, so the same rules apply whoever proposes.
+ *
+ * Proposes by default. Writing needs --apply, because a background job that
+ * silently edits the file the agent believes about itself is not something to
+ * switch on quietly.
+ */
+export async function cmdMemoryConsolidate(args) {
+  const raw = readStdinSync();
+  const candidates = raw.split("\n").map((l) => l.replace(/^[-*]\s*/, "").trim()).filter(Boolean);
+  if (!candidates.length) {
+    console.error("apx memory consolidate: no candidates on stdin (one fact per line)");
+    process.exit(1);
+  }
+
+  const limits = args?.flags?.limit ? { max_candidates: Number(args.flags.limit) } : undefined;
+  const { kept, rejected } = proposeConsolidation(candidates, limits ? { limits } : {});
+
+  if (!kept.length) {
+    console.log("nothing worth saving.");
+    for (const r of rejected) console.log(`  skipped: ${r.reason} — ${r.text.slice(0, 60)}`);
+    return;
+  }
+
+  if (!args?.flags?.apply) {
+    console.log(`would save ${kept.length}:`);
+    for (const k of kept) console.log(`  + ${k}`);
+    if (rejected.length) {
+      console.log(`\nskipped ${rejected.length}:`);
+      for (const r of rejected) console.log(`  - ${r.reason} — ${r.text.slice(0, 60)}`);
+    }
+    console.log("\nNothing was written. Add --apply to save.");
+    return;
+  }
+
+  const { written } = applyConsolidation(kept);
+  console.log(`saved ${written.length} to the notebook:`);
+  for (const w of written) console.log(`  + ${w}`);
+  console.log("\nUndo: apx memory revert");
+}
+
+export async function cmdMemoryRevert(args) {
+  const { removed } = revertConsolidation(args?.flags?.since ? { since: String(args.flags.since) } : {});
+  console.log(removed
+    ? `removed ${removed} consolidated ${removed === 1 ? "entry" : "entries"} — hand-written notes untouched`
+    : "nothing to revert (no consolidated entries)");
+}

package/src/interfaces/cli/commands/messages.js

@@ -22,7 +22,7 @@ export async function cmdMessagesTail(args) {
     // Read from global store — no project needed
     const params = new URLSearchParams({ limit: String(n) });
     if (channel) params.set("channel", channel);
-    const rows = await http.get(`/messages/global?${params}`);
+    const rows = await http.get(`/api/messages/global?${params}`);
     if (rows.length === 0) {
       console.log("(no messages)");
       return;
@@ -39,7 +39,7 @@ export async function cmdMessagesTail(args) {
   const params = new URLSearchParams({ limit: String(n) });
   if (args.flags.agent && args.flags.agent !== true) params.set("agent", args.flags.agent);
   if (channel) params.set("channel", channel);
-  const rows = await http.get(`/projects/${pid}/messages?${params}`);
+  const rows = await http.get(`/api/projects/${pid}/messages?${params}`);
   if (rows.length === 0) {
     console.log("(no messages)");
     return;
@@ -82,7 +82,7 @@ export async function cmdMessagesChat(args) {
   if (isGlobal) {
     const params = new URLSearchParams({ limit: String(n) });
     if (channel) params.set("channel", channel);
-    const rows = await http.get(`/messages/global?${params}`);
+    const rows = await http.get(`/api/messages/global?${params}`);
     printChatRows(rows);
     return;
   }
@@ -91,7 +91,7 @@ export async function cmdMessagesChat(args) {
   const params = new URLSearchParams({ limit: String(n) });
   if (args.flags.agent && args.flags.agent !== true) params.set("agent", args.flags.agent);
   if (channel) params.set("channel", channel);
-  const rows = await http.get(`/projects/${pid}/messages?${params}`);
+  const rows = await http.get(`/api/projects/${pid}/messages?${params}`);
   printChatRows(rows.reverse());
 }
 
@@ -99,7 +99,7 @@ export async function cmdMessagesSearch(args) {
   const q = args._[0];
   if (!q) throw new Error("apx messages search: missing <query>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const rows = await http.get(`/projects/${pid}/messages/search?q=${encodeURIComponent(q)}`);
+  const rows = await http.get(`/api/projects/${pid}/messages/search?q=${encodeURIComponent(q)}`);
   if (rows.length === 0) {
     console.log("(no matches)");
     return;

package/src/interfaces/cli/commands/model.js

@@ -18,24 +18,6 @@ function providersFromFallback(cfg) {
   return seen.length ? seen : [...DEFAULT_FALLBACK_ORDER];
 }
 
-function parseValue(raw) {
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return raw;
-  }
-}
-
-function setNested(obj, keyPath, value) {
-  const parts = keyPath.split(".");
-  let cur = obj;
-  for (let i = 0; i < parts.length - 1; i++) {
-    const p = parts[i];
-    if (!cur[p] || typeof cur[p] !== "object") cur[p] = {};
-    cur = cur[p];
-  }
-  cur[parts[parts.length - 1]] = value;
-}
 
 function ensureFallback(cfg) {
   cfg.super_agent = cfg.super_agent || {};

package/src/interfaces/cli/commands/nudge.js

@@ -0,0 +1,130 @@
+// apx nudge — the interruption budget: what APX said without being asked,
+// what you thought of it, and how much room is left.
+//
+//   apx nudge status
+//   apx nudge list    [--limit N] [--kind K] [--project P] [--rated | --unrated]
+//   apx nudge set     [--enabled true|false] [--daily-max N] [--quiet 22:00-07:30]
+//                     [--cooldown N] [--project-cooldown N] [--kind-cooldown N]
+//   apx nudge check   --kind K [--severity critical]
+//   apx nudge feedback <id> --useful | --noise [--note "..."]
+import { http } from "../http.js";
+
+export const NUDGE_USAGE = {
+  status:   "apx nudge status",
+  list:     "apx nudge list [--limit N] [--kind K] [--project P] [--rated|--unrated]",
+  set:      "apx nudge set [--enabled true|false] [--daily-max N] [--quiet HH:MM-HH:MM] [--cooldown N] [--project-cooldown N] [--kind-cooldown N]",
+  check:    "apx nudge check --kind K [--severity low|normal|high|critical]",
+  feedback: 'apx nudge feedback <id> --useful|--noise [--note "..."]',
+};
+
+function fail(sub, msg) {
+  console.error(`apx nudge ${sub}: ${msg}`);
+  console.error(`Usage: ${NUDGE_USAGE[sub]}`);
+  process.exit(1);
+}
+
+function shortTs(iso) {
+  if (!iso) return "";
+  return String(iso).replace(/T/, " ").replace(/Z$/, "").slice(0, 16);
+}
+
+export async function cmdNudgeStatus() {
+  const { policy, source, user_overrides } = await http.get("/api/nudges/policy");
+  const { meta } = await http.get("/api/nudges?limit=1");
+  const stats = meta?.stats || { total: 0, today: 0, rated: 0, by_kind: [] };
+
+  if (!policy.enabled) {
+    console.log("interruption budget: OFF — every unrequested message goes out.");
+    console.log("  Nothing is blocked, but everything is still recorded below.");
+    console.log("  Turn it on: apx nudge set --enabled true --daily-max 3");
+  } else {
+    const left = policy.daily_max > 0 ? Math.max(0, policy.daily_max - stats.today) : "∞";
+    console.log(`interruption budget: ON — ${stats.today} sent today, ${left} left`);
+    if (policy.daily_max > 0) console.log(`  Daily max:      ${policy.daily_max}`);
+    if (policy.quiet_hours)   console.log(`  Quiet hours:    ${policy.quiet_hours}`);
+    if (policy.cooldown_minutes) console.log(`  Cooldown:       ${policy.cooldown_minutes}m between any two`);
+    if (policy.project_cooldown_minutes) console.log(`  Per project:    ${policy.project_cooldown_minutes}m`);
+    if (policy.kind_cooldown_minutes)    console.log(`  Per kind:       ${policy.kind_cooldown_minutes}m`);
+    console.log(`  Critical:       ${policy.critical_bypasses_budget ? "may bypass (logged)" : "no bypass"}`);
+  }
+  // Provenance matters: a number the user did not choose should say who did.
+  console.log(`  Set by:         ${source.join(" → ")}`);
+  if (Object.keys(user_overrides || {}).length) {
+    console.log(`  Your overrides: ${Object.entries(user_overrides).map(([k, v]) => `${k}=${v}`).join(", ")}`);
+  }
+
+  console.log("");
+  console.log(`recorded: ${stats.total} total, ${stats.rated} rated`);
+  for (const k of stats.by_kind.slice(0, 8)) {
+    const verdict = k.useful || k.noise ? `  (👍 ${k.useful} / 👎 ${k.noise})` : "";
+    console.log(`  ${k.kind.padEnd(18)} ${String(k.sent).padStart(4)}${verdict}`);
+  }
+}
+
+export async function cmdNudgeList(args) {
+  const q = new URLSearchParams();
+  if (args?.flags?.limit) q.set("limit", args.flags.limit);
+  if (args?.flags?.kind) q.set("kind", args.flags.kind);
+  if (args?.flags?.project) q.set("project_id", args.flags.project);
+  if (args?.flags?.rated) q.set("with_feedback", "1");
+  if (args?.flags?.unrated) q.set("with_feedback", "0");
+
+  const { data } = await http.get(`/api/nudges?${q.toString()}`);
+  if (!data?.length) {
+    console.log("(nothing sent unprompted yet)");
+    return;
+  }
+  const idW = Math.max(...data.map((r) => r.id.length), 2);
+  const kindW = Math.max(...data.map((r) => String(r.kind).length), 4);
+  for (const row of data) {
+    const rating = row.feedback ? (row.feedback.useful ? "👍" : "👎") : "  ";
+    const flag = row.bypassed_budget ? " ⚠︎bypass" : "";
+    console.log(
+      `${row.id.padEnd(idW)}  ${shortTs(row.at)}  ${rating}  ` +
+      `${String(row.kind).padEnd(kindW)}  ${String(row.preview || "").slice(0, 60)}${flag}`
+    );
+  }
+}
+
+export async function cmdNudgeSet(args) {
+  const f = args?.flags || {};
+  const body = {};
+  if (f.enabled !== undefined) body.enabled = String(f.enabled) !== "false";
+  if (f["daily-max"] !== undefined) body.daily_max = Number(f["daily-max"]);
+  if (f.quiet !== undefined) body.quiet_hours = String(f.quiet);
+  if (f.cooldown !== undefined) body.cooldown_minutes = Number(f.cooldown);
+  if (f["project-cooldown"] !== undefined) body.project_cooldown_minutes = Number(f["project-cooldown"]);
+  if (f["kind-cooldown"] !== undefined) body.kind_cooldown_minutes = Number(f["kind-cooldown"]);
+  if (!Object.keys(body).length) fail("set", "nothing to set");
+
+  const { policy, source } = await http.put("/api/nudges/policy", body);
+  console.log(`budget updated (${source.join(" → ")})`);
+  console.log(`  enabled: ${policy.enabled} · daily max: ${policy.daily_max || "∞"} · quiet: ${policy.quiet_hours || "none"}`);
+  console.log("  Applies to the next unrequested message; nothing to restart.");
+}
+
+export async function cmdNudgeCheck(args) {
+  const kind = args?.flags?.kind;
+  if (!kind) fail("check", "--kind required");
+  const r = await http.post("/api/nudges/check", {
+    kind,
+    severity: args?.flags?.severity || "normal",
+    project_id: args?.flags?.project || null,
+  });
+  console.log(r.allowed ? `would send — ${r.reason}` : `would be held — ${r.reason}`);
+  if (!r.allowed && r.retry_after_ms) {
+    console.log(`  Retry in ~${Math.ceil(r.retry_after_ms / 60000)} min.`);
+  }
+}
+
+export async function cmdNudgeFeedback(args) {
+  const id = args?._?.[0];
+  if (!id) fail("feedback", "nudge id required");
+  const f = args?.flags || {};
+  if (!f.useful && !f.noise) fail("feedback", "--useful or --noise required");
+  await http.post(`/api/nudges/${encodeURIComponent(id)}/feedback`, {
+    useful: !!f.useful,
+    note: f.note || "",
+  });
+  console.log(f.useful ? "noted: useful" : "noted: not useful");
+}

package/src/interfaces/cli/commands/obsidian.js

@@ -34,9 +34,9 @@ export async function cmdObsidianSet(args) {
   if (args.flags.memory || args.flags["memory-sync"]) body.memory_sync = true;
 
   const q = scopeQuery(scope);
-  await http.post(`/projects/${pid}/integrations/${SLUG}/configure${q}`, body);
+  await http.post(`/api/projects/${pid}/integrations/${SLUG}/configure${q}`, body);
   try {
-    const r = await http.post(`/projects/${pid}/integrations/${SLUG}/validate${q}`, {});
+    const r = await http.post(`/api/projects/${pid}/integrations/${SLUG}/validate${q}`, {});
     const badge = r.is_vault ? "Obsidian vault" : "folder (no .obsidian)";
     console.log(`✓ Obsidian connected (${scope}) — ${r.vault_name} · ${r.note_count} notes · ${badge}`);
     console.log(`  ${r.vault_path}`);
@@ -50,7 +50,7 @@ export async function cmdObsidianSet(args) {
 export async function cmdObsidianStatus(args) {
   const scope = resolveScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const s = await http.get(`/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
+  const s = await http.get(`/api/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
   if (!s || s.status === "disconnected") {
     console.log(`(Obsidian not configured in scope "${scope}")`);
     return;
@@ -66,7 +66,7 @@ export async function cmdObsidianStatus(args) {
 export async function cmdObsidianSync(args) {
   const scope = resolveScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const r = await http.post(`/projects/${pid}/integrations/${SLUG}/action/sync_memory${scopeQuery(scope)}`, {});
+  const r = await http.post(`/api/projects/${pid}/integrations/${SLUG}/action/sync_memory${scopeQuery(scope)}`, {});
   console.log(`✓ Synced ${r.count} memory file(s) → vault folder "${r.folder}" (${r.changed} changed)`);
   for (const n of r.notes || []) console.log(`  ${n.changed ? "↑" : "="} ${n.note}`);
 }
@@ -74,6 +74,6 @@ export async function cmdObsidianSync(args) {
 export async function cmdObsidianRemove(args) {
   const scope = resolveScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
+  await http.delete(`/api/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
   console.log(`Removed Obsidian integration (scope: ${scope})`);
 }

package/src/interfaces/cli/commands/org.js

@@ -27,7 +27,7 @@ function fail(key, msg) {
 
 export async function cmdOrgShow(args) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const org = await http.get(`/projects/${pid}/organization`);
+  const org = await http.get(`/api/projects/${pid}/organization`);
   if (!org.areas.length && !org.roles.length) {
     console.log("(no organization structure yet)");
     return;
@@ -44,7 +44,7 @@ export async function cmdOrgAreaAdd(args) {
   const name = (args._ || []).slice(1).join(" ").trim();
   if (!name) return fail("areaAdd", "name required");
   const pid = await resolveProjectId(args?.flags?.project);
-  const area = await http.post(`/projects/${pid}/organization/areas`, {
+  const area = await http.post(`/api/projects/${pid}/organization/areas`, {
     name, slug: args.flags?.slug, goal: args.flags?.goal,
   });
   console.log(`added area ${area.name} (${area.slug})`);
@@ -54,7 +54,7 @@ export async function cmdOrgAreaRm(args) {
   const slug = (args._ || [])[1];
   if (!slug) return fail("areaRm", "slug required");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/organization/areas/${encodeURIComponent(slug)}`);
+  await http.delete(`/api/projects/${pid}/organization/areas/${encodeURIComponent(slug)}`);
   console.log(`removed area ${slug}`);
 }
 
@@ -62,7 +62,7 @@ export async function cmdOrgRoleAdd(args) {
   const name = (args._ || []).slice(1).join(" ").trim();
   if (!name) return fail("roleAdd", "name required");
   const pid = await resolveProjectId(args?.flags?.project);
-  const role = await http.post(`/projects/${pid}/organization/roles`, {
+  const role = await http.post(`/api/projects/${pid}/organization/roles`, {
     name, slug: args.flags?.slug, area: args.flags?.area, description: args.flags?.desc,
   });
   console.log(`added role ${role.name} (${role.slug})${role.area ? ` in ${role.area}` : ""}`);
@@ -72,6 +72,6 @@ export async function cmdOrgRoleRm(args) {
   const slug = (args._ || [])[1];
   if (!slug) return fail("roleRm", "slug required");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/organization/roles/${encodeURIComponent(slug)}`);
+  await http.delete(`/api/projects/${pid}/organization/roles/${encodeURIComponent(slug)}`);
   console.log(`removed role ${slug}`);
 }

package/src/interfaces/cli/commands/pair.js

@@ -34,7 +34,7 @@ const fmt = {
 // pointing at 127.0.0.1 works through the USB bridge. For pure WiFi
 // pairing, the user should bind APX_HOST=0.0.0.0 and we'll emit the
 // LAN IP here instead.
-function pickHostForQr({ host, port }) {
+function pickHostForQr({ host }) {
   if (host && host !== "0.0.0.0" && host !== "::" && host !== "127.0.0.1") {
     return host;
   }
@@ -74,7 +74,7 @@ async function runPairing(args, channel) {
   // 1. Ask daemon for a pairing nonce.
   let init;
   try {
-    init = await http.post("/pair/init", {});
+    init = await http.post("/api/pair/init", {});
   } catch (e) {
     console.error(fmt.red(`pair init failed: ${e.message}`));
     process.exit(1);
@@ -117,7 +117,7 @@ async function runPairing(args, channel) {
   while (Date.now() < deadline) {
     await sleep(1500);
     try {
-      const s = await http.get(`/pair/status/${init.pairing_id}`);
+      const s = await http.get(`/api/pair/status/${init.pairing_id}`);
       if (s.status === "confirmed") {
         console.log(`  ${fmt.green("●")} ${fmt.bold("paired")} ${fmt.gray("·")} ${s.device_label || ""}`);
         console.log(`    ${fmt.gray("client_id:")} ${s.client_id}`);
@@ -138,7 +138,7 @@ async function runPairing(args, channel) {
 }
 
 export async function cmdPairList() {
-  const { clients } = await http.get("/pair/list");
+  const { clients } = await http.get("/api/pair/list");
   if (!clients.length) {
     console.log(`\n  ${fmt.dim("no paired devices")}\n`);
     return;
@@ -160,12 +160,12 @@ export async function cmdPairRevoke(args = {}) {
     process.exit(1);
   }
   // Allow short prefix: resolve via /pair/list.
-  const { clients } = await http.get("/pair/list");
+  const { clients } = await http.get("/api/pair/list");
   const match = clients.find((c) => c.id === id || c.id.startsWith(id));
   if (!match) {
     console.error(fmt.red(`no paired device matches "${id}"`));
     process.exit(1);
   }
-  await http.delete(`/pair/revoke/${match.id}`);
+  await http.delete(`/api/pair/revoke/${match.id}`);
   console.log(`  ${fmt.green("●")} revoked ${match.label} ${fmt.gray(`(${match.id.slice(0, 8)})`)}`);
 }

package/src/interfaces/cli/commands/plugins.js

@@ -1,7 +1,7 @@
 import { http } from "../http.js";
 
 export async function cmdPluginsList() {
-  const data = await http.get("/plugins");
+  const data = await http.get("/api/plugins");
   const ids = Object.keys(data);
   if (ids.length === 0) {
     console.log("(no plugins loaded)");
@@ -18,6 +18,6 @@ export async function cmdPluginsList() {
 export async function cmdPluginStatus(args) {
   const id = args._[0];
   if (!id) throw new Error("apx plugins status: missing <plugin-id>");
-  const s = await http.get(`/plugins/${id}/status`);
+  const s = await http.get(`/api/plugins/${id}/status`);
   console.log(JSON.stringify(s, null, 2));
 }

package/src/interfaces/cli/commands/profile.js

@@ -73,7 +73,7 @@ function printDoctor(report) {
 // ── list ────────────────────────────────────────────────────────────────────
 
 export async function cmdProfileList() {
-  const { active, profiles } = await http.get("/profiles");
+  const { active, profiles } = await http.get("/api/profiles");
   if (!profiles.length) {
     console.log("(no profiles available)");
     return;
@@ -94,7 +94,7 @@ export async function cmdProfileShow(args) {
   const id = args._[0];
   if (!id) fail("show", "missing <id>");
 
-  const p = await http.get(`/profiles/${encodeURIComponent(id)}`);
+  const p = await http.get(`/api/profiles/${encodeURIComponent(id)}`);
   console.log(`${p.name} (${p.id}) v${p.version || "?"} — ${p.source}${p.active ? " — ACTIVE" : ""}`);
   if (p.description) console.log(p.description);
   console.log(`languages: ${p.languages.join(", ") || "en"}`);
@@ -119,7 +119,7 @@ export async function cmdProfileInstall(args) {
   const source = args._[0];
   if (!source) fail("install", "missing <id|path>");
 
-  const r = await http.post("/profiles/install", { source, force: !!args?.flags?.force });
+  const r = await http.post("/api/profiles/install", { source, force: !!args?.flags?.force });
   console.log(`installed ${r.profile.name} (${r.profile.id}) v${r.profile.version || "?"}`);
   console.log(`  prompt: ~${r.tokens} tokens`);
   printWarnings(r.warnings);
@@ -133,7 +133,7 @@ export async function cmdProfileUse(args) {
   const id = args._[0];
   if (!id) fail("use", "missing <id>");
 
-  const r = await http.post("/profiles/use", { id, force: !!args?.flags?.force });
+  const r = await http.post("/api/profiles/use", { id, force: !!args?.flags?.force });
   console.log(`active profile: ${r.profile.name} (${r.profile.id})`);
   printWarnings(r.warnings);
 
@@ -146,7 +146,7 @@ export async function cmdProfileUse(args) {
 }
 
 export async function cmdProfileOff() {
-  const r = await http.post("/profiles/off", {});
+  const r = await http.post("/api/profiles/off", {});
   if (!r.was) {
     console.log("no profile was active — nothing to do");
     return;
@@ -185,14 +185,14 @@ async function interactiveConfig(profile) {
 }
 
 export async function cmdProfileConfig(args) {
-  const { active } = await http.get("/profiles");
+  const { active } = await http.get("/api/profiles");
   const id = args?.flags?.profile || active;
   if (!id) {
     console.error("apx profile config: no profile is active — run: apx profile use <id>");
     process.exit(1);
   }
 
-  const profile = await http.get(`/profiles/${encodeURIComponent(id)}?preview=0`);
+  const profile = await http.get(`/api/profiles/${encodeURIComponent(id)}?preview=0`);
 
   let values = parseSetFlags(args?.flags);
   if (args?.flags?.interactive) {
@@ -217,7 +217,7 @@ export async function cmdProfileConfig(args) {
     return;
   }
 
-  const r = await http.patch("/profiles/config", { values, id });
+  const r = await http.patch("/api/profiles/config", { values, id });
   console.log(`updated: ${r.changed.join(", ")}`);
   for (const k of r.changed) console.log(`  ${k.padEnd(24)} ${r.config[k]}`);
 
@@ -233,14 +233,14 @@ export async function cmdProfileConfig(args) {
 export async function cmdProfileDoctor(args) {
   const id = args._[0];
   const q = id ? `?id=${encodeURIComponent(id)}` : "";
-  printDoctor(await http.get(`/profiles/doctor${q}`));
+  printDoctor(await http.get(`/api/profiles/doctor${q}`));
 }
 
 export async function cmdProfileUninstall(args) {
   const id = args._[0];
   if (!id) fail("uninstall", "missing <id>");
 
-  const r = await http.delete(`/profiles/${encodeURIComponent(id)}`);
+  const r = await http.delete(`/api/profiles/${encodeURIComponent(id)}`);
   console.log(`uninstalled "${r.id}" (${r.source})`);
   if (r.routines?.removed?.length) console.log(`  routines removed: ${r.routines.removed.join(", ")}`);
   if (r.routines?.kept?.length) {

package/src/interfaces/cli/commands/project-config.js

@@ -18,7 +18,7 @@ import { resolveProjectId } from "./project.js";
 
 async function reloadDaemon() {
   try {
-    await http.post("/admin/reload", {});
+    await http.post("/api/admin/reload", {});
   } catch (e) {
     console.log(`⚠️  reload failed: ${e.message} (changes saved, restart daemon to apply)`);
   }
@@ -65,7 +65,7 @@ async function projectIdFromArg(target) {
 export async function cmdProjectConfigShow(args) {
   const target = args._[0];
   const id = await projectIdFromArg(target);
-  const data = await http.get(`/projects/${id}/config`);
+  const data = await http.get(`/api/projects/${id}/config`);
   const key = args.flags.key;
   if (key) {
     const eff = readDotted(data.effective || {}, key);
@@ -89,7 +89,7 @@ export async function cmdProjectConfigSet(args) {
   if (raw === undefined) throw new Error("apx project config set: missing <value>");
   const id = await projectIdFromArg(target);
   const value = coerceValue(raw);
-  await http.patch(`/projects/${id}/config`, { set: { [dotted]: value } });
+  await http.patch(`/api/projects/${id}/config`, { set: { [dotted]: value } });
   await reloadDaemon();
   console.log(`✅ set ${dotted} = ${JSON.stringify(value)}`);
 }
@@ -99,7 +99,7 @@ export async function cmdProjectConfigUnset(args) {
   const dotted = args._[1];
   if (!dotted) throw new Error("apx project config unset: missing <dotted.key>");
   const id = await projectIdFromArg(target);
-  await http.patch(`/projects/${id}/config`, { unset: [dotted] });
+  await http.patch(`/api/projects/${id}/config`, { unset: [dotted] });
   await reloadDaemon();
   console.log(`✅ unset ${dotted}`);
 }
@@ -107,7 +107,7 @@ export async function cmdProjectConfigUnset(args) {
 export async function cmdProjectConfigEdit(args) {
   const target = args._[0];
   const id = await projectIdFromArg(target);
-  const data = await http.get(`/projects/${id}/config`);
+  const data = await http.get(`/api/projects/${id}/config`);
   const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "apx-cfg-"));
   const tmpFile = path.join(tmpDir, "config.json");
   fs.writeFileSync(tmpFile, JSON.stringify(data.project_only || {}, null, 2) + "\n");
@@ -125,7 +125,7 @@ export async function cmdProjectConfigEdit(args) {
     throw new Error(`invalid JSON after edit: ${e.message}`);
   }
   fs.rmSync(tmpDir, { recursive: true, force: true });
-  await http.put(`/projects/${id}/config`, updated);
+  await http.put(`/api/projects/${id}/config`, updated);
   await reloadDaemon();
   console.log(`✅ saved project_only config for #${id}`);
 }

package/src/interfaces/cli/commands/project.js

@@ -12,12 +12,12 @@ function requireRoot() {
 
 export async function cmdProjectAdd(args) {
   const target = args._[0] || requireRoot();
-  const result = await http.post("/projects", { path: path.resolve(target) });
+  const result = await http.post("/api/projects", { path: path.resolve(target) });
   console.log(`Registered #${result.id}: ${result.path}`);
 }
 
 export async function cmdProjectList() {
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   if (projects.length === 0) {
     console.log("(no projects registered — try `apx project add .`)");
     return;
@@ -31,7 +31,7 @@ export async function cmdProjectList() {
 export async function cmdProjectRemove(args) {
   const target = args._[0];
   if (!target) throw new Error("apx project remove: missing <path|id>");
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   let id;
   if (/^\d+$/.test(target)) id = parseInt(target, 10);
   else {
@@ -40,7 +40,7 @@ export async function cmdProjectRemove(args) {
     if (!found) throw new Error(`not registered: ${target}`);
     id = found.id;
   }
-  await http.delete(`/projects/${id}`);
+  await http.delete(`/api/projects/${id}`);
   console.log(`Removed project #${id}`);
 }
 
@@ -51,19 +51,19 @@ export async function cmdProjectRebuild(args) {
     if (/^\d+$/.test(target)) id = parseInt(target, 10);
     else {
       const abs = path.resolve(target);
-      const projects = await http.get("/projects");
+      const projects = await http.get("/api/projects");
       const found = projects.find((p) => p.path === abs);
       if (!found) throw new Error(`not registered: ${target}`);
       id = found.id;
     }
   } else {
     const root = requireRoot();
-    const projects = await http.get("/projects");
+    const projects = await http.get("/api/projects");
     const found = projects.find((p) => p.path === root);
     if (!found) throw new Error(`current project not registered — run \`apx project add .\``);
     id = found.id;
   }
-  const result = await http.post(`/projects/${id}/rebuild`);
+  const result = await http.post(`/api/projects/${id}/rebuild`);
   console.log(`Rebuilt project #${id}: ${result.agents} agents`);
 }
 
@@ -78,7 +78,7 @@ export async function resolveProjectId(target) {
     if (typeof target === "number" || /^\d+$/.test(String(target))) {
       return parseInt(target, 10);
     }
-    const projects = await http.get("/projects");
+    const projects = await http.get("/api/projects");
     const tgt = String(target);
 
     // exact path
@@ -112,10 +112,10 @@ export async function resolveProjectId(target) {
     // Fall back to the default project (id=0) — always available, no .apc/ required.
     return 0;
   }
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   const found = projects.find((p) => p.path === root);
   if (found) return found.id;
   // auto-register
-  const result = await http.post("/projects", { path: root });
+  const result = await http.post("/api/projects", { path: root });
   return result.id;
 }